--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-d28d3135da
2019-05-14 00:56:14.102061
--------------------------------------------------------------------------------
Name : python36
Product : Fedora EPEL 7
Version : 3.6.8
Release : 1.el7
URL :
https://www.python.org/
Summary : Interpreter of the Python programming language
Description :
Python is an accessible, high-level, dynamically typed, interpreted programming
language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python36 package provides the "python3" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python36-libs package,
which should be installed automatically along with python36.
The remaining parts of the Python standard library are broken out into the
python36-tkinter and python36-test packages, which may need to be installed
separately.
Documentation for Python is provided in the python36-docs package.
Packages containing additional libraries for Python are generally named with
the "python36-" prefix.
--------------------------------------------------------------------------------
Update Information:
- Latest upstream (rhbz#1688547, rhbz#1696472) - Fix for CVE-2019-5010
(rhbz#1666519, rhbz#1666523)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1696472 - Update to Python 3.6.8
https://bugzilla.redhat.com/show_bug.cgi?id=1696472
[ 2 ] Bug #1688547 - CVE-2019-9636 python36: python: Information Disclosure due to
urlsplit improper NFKC normalization [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1688547
[ 3 ] Bug #1666523 - CVE-2019-5010 python36: python: NULL pointer dereference using a
specially crafted X509 certificate [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1666523
[ 4 ] Bug #1664517 - CVE-2018-20406 python36: python: Integer overflow in
Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1664517
[ 5 ] Bug #1632093 - CVE-2018-14647 python36: python: Missing salt initialization in
_elementtree.c module [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1632093
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python36' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------